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is--; 

Page 15, line 4, delete *1his"/and substitute -the—; 

Page 15, after line 25, in'sert the following new paragraph: 


—While this invention has been described in conjunction with specific 
embodiments thereof, it is evident that many alternatives, modifications and 
variations will be apparent to those skilled in the art. Accordingly, the 
preferred embodiments of the invention as set forth herein, are intended to be 
illustrative, not limiting. Various changes may be made without departing 
from the true spirit and full scope of the invention as set forth herein and 
defined in the claims. — 


IN THE CLAIMS : 

Please cancel claims 1 - 5 in their entirety and without prejudice and 
substitute the following new claims. 


^ 


1 —6. A method for verifying transformation of a source code (1 ) into a 

2 transformed code (3) designed for an embedded system, said source and 

3 transformed codes being associated with virtual machines, characterized in 
/I 4 that it comprises at least the following steps: 

5 - determining, for each of said source (1) and transformed (3) codes, a 

6 first common subset (13), constituting a single virtual machine that factors in 

7 the behavior of said source and transformed codes (1 ,3); 

8 - determining, for each of said source (1) and transformed (3) codes, a 

9 second subset (10, 30) constituted by a plurality of so-called auxiliary 

10 functions (10, -30/) used by said single virtual machine, said auxiliary 

11 functions (10, -30/) representing residual differences between said source (1) 

12 and transformed (3) codes; 
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13 - associating said auxiliary functions in pairs, a first auxiliary function 

14 (10/) of each pair belonging to said second subset (10) associated with said 

15 source code (1) and a second auxiliary function (30/) of each pair belonging to 

16 said second subset (30) associated with said transformed code (3); 

17 - verifying (6) a given correspondence property between said auxiliary 

18 functions (10, - 30,) of all of said pairs; and 

19 - verifying that said transformation of the source code (1 ) into a 
2 0 transformed code (3) satisfies said given correspondence property. 

1 7. A method according to claim 6, characterized in that said 

2 correspondence property is a logical relation, so that said auxiliary functions 

3 of each of said pairs (10, - 30,), when executed, generate results linked by 

4 said logical relation. . 

1 8. A method according to claim 6, characterized in that said logical 

2 relation is an identity relation for observable entities of each of said source 

3 and transformed codes, for any pair of auxiliary functions, so that the 

4 functionalities of said source code (1) are retained when said transformation 

5 into said transformed code (3), and said verification of the code 

6 transformation are performed. 

1 9. A method according to claim 6 further comprising applying the 

2 steps of the verification of transformation to a code transformer (2) and 

3 generating from said source code (1), a transformed code (3) in a memory 

4 (71) of a chip card (7). 

1 10. A method according to claim 7 further comprising applying the 

2 steps of the verification of transformation to a code transformer (2) and 

3 generating from said source code (1), a transformed code (3) in a memory 

4 (71 ) of a chip card (7). 

1 11. A method according to claim 9, characterized in that, said 

2 transformed code is a program written in the virtual machine of a given 
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3 computer language, and said chip card (7) stores a plurality of software 

4 applications (Ai through An) written in said transformed code (3). 

1 12. A method according to claim 10, characterized in that, said 

2 transformed code is a program written in the virtual machine of a given 

3 computer language, and said chip card (7) stores a plurality of software 

4 applications (Ai through An) written in said transformed code (3). 

1 13. A method according to claim 9, characterized in that said source 

2 code (1) is a program written in a "JAVA" virtual machine and said 

3 transformed code (3) is a program written in a "JAVA CARD" virtual machine. 

1 14. A method according to claim 10, characterized in that said 

2 source code (1) is a program written in a "JAVA" virtual machine and said 

3 transformed code (3) is a program written in a "JAVA CARD" virtual machine. 

1 15. A method according to claim 1 1 , characterized in that said 

2 source code (1) is a program written in a "JAVA" virtual machine and said 

3 transformed code (3) is a program written in a "JAVA CARD" virtual machine. 

1 1 6. A method according to claim 1 2, characterized in that said 

2 source code (1) is a program written in a "JAVA" virtual machine and said 

3 transformed code (3) is a program written in a "JAVA CARD" virtual 

4 machine. - 
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